I've noticed that the following hosts are impersonated (in HELO greetings) significantly more often than any others: smtp.comunitel.net smtp.orange.es smtp.jazztel.es Anyone know why? And these are all in Spain, in particular. Do Spaniards lack imagination or what? A distant fourth would be: mail.sanmail.ru -Philip